Managing antivirus false positive from unofficial signatures in NS8

Support
,
1

Hi all, our NS8 sometimes found false positive in incoming mail messages. The most of time the false positive is derived from a unofficial signature. There is an NS8 official way to modify signatures rules used by clamav? If I add or modify a .ign2 file to /var/lib/clamav/, the file is maintained after the clamav container update?

Paolo

2

Yes, it’s saved in a podman volume “clamav-db” but it’s not included in the backup.

3

thank you very much, I’ll try.

My best regards